Valine HTML Injection

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...

GHSA-HHRP-QM88-XJR3 Valine HTML Injection

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...

CVE-2018-19289

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...

CVE-2018-19289

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...

Design/Logic Flaw

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...

CVE-2018-19289

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...

CVE-2018-19289

Valine v1.3.3 is affected by CVE-2018-19289: HTML injection can be triggered via an EMBED element in conjunction with a .pdf file, enabling JavaScript execution. Connected sources (GHSA/OSV) corroborate HTML injection in Valine and mention the embed policy bypass. No remediation/version patch det...

CVE-2018-19289

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...

CVE-2018-19289: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...

PT-2018-14907

Name of the Vulnerable Software and Affected Versions Valine version 1.3.3 Description An issue in Valine allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file. Recommendations For Valine version 1.3.3, consider disabling the...

JEESNS Cross-Site Scripting Vulnerability

JEESNS is an enterprise-level open source social management system building platform based on Java and MySQL, which includes microblogging module, group module and article module. JEESNS 1.3 version of the com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java file cross-site scripting...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

Cross site scripting

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178

CVE-2018-19178 concerns JEESNS 1.3. The vulnerability is in com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java and allows stored XSS via an HTML EMBED element. This CVE entry notes it is a different issue from CVE-2018-17886. The available sources describe the affected component and t...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178: Improper Neutralization of Input During Web Page Generation

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

PT-2018-14840

Name of the Vulnerable Software and Affected Versions JEESNS version 1.3 Description The issue in JEESNS allows stored XSS via an HTML EMBED element. This is a different issue than previously identified vulnerabilities. Recommendations For JEESNS version 1.3, consider disabling the...

com.brienwheeler.apps:apps-tomcat (>=1.10, <=1.11), com.brienwheeler.dist:dist-tomcat (>=1.10, <=1.11) +19 more potentially affected by CVE-2018-8037 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m9, <=9.0.8)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m9, =1.10, =1.10, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =0.60.0, =0.60.0, =1.6-beta.2, =5.0.5, =1.2, =9.0.0.m9, =9.0.0.m9, =9.0.8 and more Source cves: CVE-2018-8037 Source advisory: OSV:GHSA-6V52-MJ5R-7J2M...